EC-Council
312-50V12 · Question #215
An ethical hacker is hired to evaluate the defenses of an organization's database system which is known to employ a signature-based IDS. The hacker knows that some SQL Injection evasion techniques may
Sign in or unlock 312-50V12 to reveal the answer and full explanation for question #215. The question stem and answer options stay visible for context.
Submitted by andreas_gr· Mar 4, 2026Web Application Hacking
Question
An ethical hacker is hired to evaluate the defenses of an organization's database system which is known to employ a signature-based IDS. The hacker knows that some SQL Injection evasion techniques may allow him to bypass the system's signatures. During the operation, he successfully retrieved a list of usernames from the database without triggering an alarm by employing an advanced evasion technique. Which of the following could he have used?
Options
- AUtilizing the char encoding function to convert hexadecimal and decimal values into characters
- BImplementing sophisticated matches such as "OR john' = 'john'" in place of classical matches like
- CManipulating white spaces in SQL queries to bypass signature detection
- DUsing the URL encoding method to replace characters with their ASCII codes in hexadecimal
Unlock 312-50V12 to see the answer
You've previewed enough free 312-50V12 questions. Unlock 312-50V12 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#SQL injection evasion#IDS bypass#web application attacks#encoding techniques